Star200+

Cicd Goat

REVIEW · 74
Community indexed

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Downloads0
Stars2.3K
Version1.0.0
Quality74/100 · Strong
Trust74/100 · Sandbox only
Audit73/100 · Needs review

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add cider-security-research/cicd-goat

Maintenance

stale

2y since push

Risk

Needs review

Repository appears stale

GitHub quality

2.3K

74/100 Quality · 82/100 Trust

Coverage tags

CodingGitHub automationdevopsautomationappsec

Review notes

Repository appears stale · Repository looks stale

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Strong
74

Solid option that is likely worth shortlisting for production workflows.

Trust

Sandbox only
74

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

Audit

Needs review
73

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

OpenAgentSkill Trust Score v5

Human review before install

Run only in a sandbox and compare close alternatives before using it for real work.

PythonDevOpsCodexClaude CodeCursor

Stars

2.3K GitHub stars

Repo activity

2.3K stars, 414 forks

Maintenance

2y since push

License

Apache-2.0

Install

npx skills add cider-security-research/cicd-goat

Install safety

standard package or runtime install path

Permission surface

filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Strong README/SKILL.md context

Risk summary

Review before production

  • Repository looks stale
  • Quality score needs review
  • Recent maintenance: 2y since push

Install readiness

Install path available

  • Install path is available
  • Repository evidence is available
  • License is declared
  • No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

Open JSON

Suited tasks

  • RAG and knowledge workflows
  • Claude Code teams
  • teams that value GitHub adoption signals
  • Chunk documents

Suited agents

PythonDevOpsCodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command
npx skills add cider-security-research/cicd-goat
Policy
review
Human review
yes

Trust and risk

Trust
74/100
Audit
73/100
Risk level
Needs review

Outcome loop

Endpoint
/api/agent/outcome
Event ID
resolve
Outcomes
5

Install command

npx skills add cider-security-research/cicd-goat
Public auditEval reportResolve APIInstall handoff

Do not use when

  • teams that require actively maintained dependencies
  • production agents without a repository review
  • Repository looks stale
  • Repository appears stale
  • Quality score needs review

Alternative

Dokploy

35.7K Stars

npx skills add Dokploy/dokploy

Alternative

Kubernetes

123.0K Stars

npx skills add kubernetes/kubernetes

Alternative

Traefik

63.6K Stars

npx skills add traefik/traefik

Alternative

Etcd

51.8K Stars

npx skills add etcd-io/etcd

Agent safety v2

57/100 · Review before install

Experimentalreview

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

Test manually in an isolated workspace and compare against safer alternatives.

Resolve via API

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

  • Repository appears stale

Install targets

Install this skill in your agent workflow

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

skill install

OpenAgentSkill CLI

Use the registry command when your workflow supports the OpenAgentSkill installer.

$ npx skills add cider-security-research/cicd-goat

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Open JSON

/api/agent/resolve?task=Use%20Cicd%20Goat%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20Cicd%20Goat%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/cider-security-research-cicd-goat/install

Agent should check

  • Task fit and alternatives from Resolve API.
  • Audit score, trust score, and safety policy warnings.
  • Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use Cicd Goat in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20Cicd%20Goat%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/cider-security-research-cicd-goat/install
Install command: npx skills add cider-security-research/cicd-goat
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/cider-security-research-cicd-goat/install

LLM text format

/api/skills/cider-security-research-cicd-goat/install?format=text

Find alternatives

/api/skills/search?q=Cicd%20Goat&limit=3

Agent prompt

Use Cicd Goat for this task. Review https://www.openagentskill.com/api/skills/cider-security-research-cicd-goat/install, then install with: npx skills add cider-security-research/cicd-goat

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/cider-security-research-cicd-goat

LLM text

/api/registry/manifest/cider-security-research-cicd-goat?format=text

Install alias

/api/registry/install/cider-security-research-cicd-goat

Recommend

/api/registry/recommend?task=Use%20Cicd%20Goat%20in%20an%20agent%20workflow&limit=3

Agent fit

79/100

RAG and knowledge

Use-case tags

RAG and knowledgeGitHub automationCoding agents

Platforms

Python, DevOps, Claude Code

Audit report

Needs review · 73/100

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

View audit reportView eval report

Agent decision cockpit

Companion skill for RAG and knowledge

Shortlist this skill and compare it with close alternatives before production adoption.

79
Readiness
Shortlist
Stage

Role in stack

Companion skill

Primary fit

RAG and knowledge

Trust label

Strong shortlist

Install path

Command ready

Use when

  • RAG and knowledge workflows
  • Claude Code teams
  • teams that value GitHub adoption signals

Evidence

  • 2,274 GitHub stars
  • install command or GitHub repo available
  • 74/100 quality profile
  • 12 OpenAgentSkill engagement events

review first

  • Repository looks stale

Implementation path

  1. 1Install it in a sandbox agent and run one RAG and knowledge task end to end.
  2. 2Compare output quality, latency, and failure behavior against at least one alternative.
  3. 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

74
OpenAgentSkill Trust Score

GitHub adoption

PASS

2.3K GitHub stars

Stars/forks activity

PASS

2.3K stars, 414 forks; issue activity unavailable in current metadata

Recent maintenance

FIX

2y since push

License clarity

PASS

Apache-2.0

Good signals

  • Manually verified listing
  • AI review approved
  • Install path is available
  • Repository evidence is available
  • Meaningful GitHub adoption signal
  • Install command has no obvious high-risk pattern
  • Outcome loop is ready but needs first real agent run

Review before install

  • Repository looks stale
  • Quality score needs review
  • Recent maintenance: 2y since push
  • No real agent outcome reports yet
  • Human review required before unattended installation

Recommended action

Run only in a sandbox and compare close alternatives before using it for real work.

Quality profile

Strong candidate for agent workflows

Solid option that is likely worth shortlisting for production workflows.

74
GitHub stars
2.3K
Freshness
2y ago
Install ready
Yes
License
Apache-2.0
Review before install: Repository looks stale

Workflow fit

Use this skill in these scenarios

Search private knowledge

RAG and knowledge

I need my agent to build a RAG workflow over documents and retrieve reliable context.

Manage repositories

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Build and ship code

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Workflow fit

Add it to a complete workflow

Ingest, retrieve, and cite

RAG knowledge base

A workflow for document-heavy agents that ingest files, create searchable knowledge, retrieve relevant context, and answer with grounded sources.

Turn skills into distribution

Content growth agent

A workflow for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Inspect, patch, and verify code

Coding review agent

A workflow for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.

Alternative shortlist

Compare before you install

Similar skills that may fit this task.

Compare all

Dokploy

Open Source Alternative to Vercel, Netlify and Heroku.

Adopt
Ready100
Quality100
Stars35.7K

Kubernetes

Production-Grade Container Scheduling and Management

Adopt
Ready100
Quality100
Stars123.0K

Traefik

The Cloud Native Application Proxy

Adopt
Ready100
Quality100
Stars63.6K

Etcd

Distributed reliable key-value store for the most critical data of a distributed system

Adopt
Ready100
Quality100
Stars51.8K

Overview

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Imported by the skill-only GitHub discovery pipeline because it matches agent skill, automation, domain workflow, RAG, document-processing, data, finance, security, or developer-tool signals. Protocol-server projects are excluded from automated imports.

Platform compatibility

pythonFULL
devopsFULL

Technical details

Version
1.0.0
License
Apache-2.0
Last updated
Jun 16, 2026
Published
Jun 16, 2026

Frameworks & tools

PythonDevOps

Decision snapshot

Companion skill

79
Ready
Shortlist
Stage

2,274 GitHub stars

Audit

Install review

Install and adoption review

73
Needs review
Security
89/100
Maintenance
20/100
Install
92/100
Open full auditView eval report

Agent-proven evidence

Agent-proven evidence

Outcome reports after resolve, review, install, and one narrow run.

0
Proven
Needs first agent runAuto-install: review firstLast: Unknown
Success rate
—
Recent failure
—
Outcomes
0
Output quality
—
Failed
0
Not relevant
0
Installs
0
Risk blocked
0
Setup needed
0
Production
0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven rankingOutcome contract

Install

Add to agent workflow

Free and open source. Review the report before installing into production agents.

Compare AlternativesAuto-resolve PlanView on GitHubDocumentation

Growth loop

Share kit

X

Scenario-led draft for Cicd Goat, ready for a manual X post.

Curator note
Cicd Goat: A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

2.3K stars

https://www.openagentskill.com/skills/cider-security-research-cicd-goat?ref=x
Open X draft
Optional reply with install command
Listing + install path for Cicd Goat:
https://www.openagentskill.com/skills/cider-security-research-cicd-goat?ref=x

Install: npx skills add cider-security-research/cicd-goat
Open reply draft

Listing source

Community indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Indexed by
OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This Community indexed listing is attributed to cider-security-research but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent-Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/cider-security-research-cicd-goat?metric=listed&label=Listed)](https://www.openagentskill.com/skills/cider-security-research-cicd-goat)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/cider-security-research-cicd-goat?metric=trust&label=Trust)](https://www.openagentskill.com/skills/cider-security-research-cicd-goat)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/cider-security-research-cicd-goat?metric=audit&label=Audit)](https://www.openagentskill.com/skills/cider-security-research-cicd-goat/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/cider-security-research-cicd-goat?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/cider-security-research-cicd-goat)
Preview badge Open audit Creator kit

Author

C

cider-security-research✓

@cider-security-research

Tags

devopsautomationappseccicdctfdevsecopsgitlabinfosecjenkinssecurity

Platform fit

Claude Code

Health signals

GitHub stars
2.3K
Quality score
50/100
Last GitHub push
Jul 14, 2024
Framework hints
2
OpenAgentSkill views
7
Install copies
0
Outbound clicks
0

Community signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & safety

Sandbox only

74
  • GitHub adoption2.3K GitHub starsPASS
  • Stars/forks activity2.3K stars, 414 forks; issue activity unavailable in current metadataPASS
  • Recent maintenance2y since pushFIX
  • License clarityApache-2.0PASS
  • README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
  • Dependency/runtime riskno major dependency risk hints in public metadataPASS

Related skills

Dokploy

Open Source Alternative to Vercel, Netlify and Heroku.

35.7K Stars · 0 Installs

Kubernetes

Production-Grade Container Scheduling and Management

123.0K Stars · 0 Installs

Traefik

The Cloud Native Application Proxy

63.6K Stars · 0 Installs

Etcd

Distributed reliable key-value store for the most critical data of a distributed system

51.8K Stars · 0 Installs